• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 338
  • Last Modified:

How to transfer FSMO roles

Hello:

I am preparing to transfer the FSMO Roles from 1 Windows Domain Controller to another DC.  I have reviewed the process from the following web site: https://www.petri.com/seizing_fsmo_roles  ... and I have created more specific instructions for my network (Attached).  

I unfortunately do not have a test Lab or Test Domain to practice with on and I have not transferred roles in a very long time.  Hence, I wanted to verify the steps involved.  I created a similar question earlier
 ( https://www.experts-exchange.com/questions/28977018/How-to-swap-out-existing-domain-controllers-with-2-new-domain-Controllers.html ) ; but this is a little different and specifically focused on transferring the FSMO roles.

I am particularly concerned with the process to "To Transfer the Schema Master Role:" section (page 5, #8).  Even though I received a warning I think I should be able to transfer the Schema Master Role, as documented.  Or am I wrong and I should go about it a different way?

I wanted to ask other Network Administrators who may have done this before.  Just to put my mind at ease.
Procedure-to-transfer-the-Time-setti.pdf
0
Pkafkas
Asked:
Pkafkas
2 Solutions
 
DrDave242Commented:
Even though I received a warning I think I should be able to transfer the Schema Master Role, as documented.  Or am I wrong and I should go about it a different way?

This warning is perfectly normal, because that console is connecting to a domain controller that doesn't hold the Schema Master role. When you do this, you can view the schema but can't change it. You can still transfer the role, though.
0
 
Todd NelsonSystems EngineerCommented:
Moving FSMO roles is essentially a non-event.

Use this article for moving Active Directory FSMO roles ... http://trunkofmemorie.blogspot.co.uk/2012/12/how-to-change-fsmo-roles-in-windows-2012.html

FYI...
You should never have to use ntdsutil to move FSMO roles unless one of your domain controllers crashed and is not receoverable--even with RODCs.

This article will help you to understand the best placement of each role ... https://support.microsoft.com/en-us/kb/223346

For transferring time services, I always use the following commands...

From an elevated PowerShell, run on PDC Emulator (First DC)...

w32tm.exe /config /manualpeerlist:”0.us.pool.ntp.org 1.us.pool.ntp.org 2.us.pool.ntp.org 3.us.pool.ntp.org” /syncfromflags:manual /reliable:YES /update
Restart-Service w32time

Open in new window



Run these commands on all other DCs...

w32tm /config /syncfromflags:domhier /update
Restart-Service w32time

Open in new window

0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now